Free Fortinet NSE4 Exam Dumps Questions & Answers

Which of the following traffic shaping functions can be offloaded to a NP processor?
(Choose two.)

• A.Differentiated services field rewriting
• B.Que prioritization
• C.Guarantee bandwidth
• D.Traffic cap (bandwidth limit)

The exhibit shows a FortiGate routing table.

Which of the following statements are correct?(Choose two)

• A.The FortiGate will route the traffic to 172.17.1.2 to next hop with the IP address 192.168.11.254
• B.An IP address in the subnet 172.16.78.0/24 has been assigned to the dmz interface.
• C.The distance values for the route to 192.168.1.0/24 is 200
• D.There is only one active default route.

What is required in a FortiGate configuration to have more than one dialup IPsec VPN using aggressive mode?

• A.Each aggressive mode dialup MUST accept connections from different peer ID.
• B.The peer ID setting must NOT be used.
• C.All the aggressive mode dialup VPNs MUST accept connections from the same peer ID.
• D.Each peer ID MUST match the FQDN of each remote peer.

Review the static route configuration for IPsec shown in the exhibit; then answer the question below.

Which statements are correct regarding this configuration? (Choose two.)

• A.Interface remote is an IPsec interface.
• B.A gateway address is not required because the default route is used.
• C.A gateway address is not required because the interface is a point-to-point connection.
• D.Interface remote is a zone.

Which best describe the mechanism of a TCP SYN flood?

• A.The attacker starts many connections, but never acknowledges to fully form them.
• B.The attacker sends a packet designed to "sync" with the FortiGate.
• C.The attacker keeps open many connections with slow data transmission so that other clients cannot start new connections.
• D.The attacker sends a specially crafted malformed packet, intended to crash the target by exploiting its parser.